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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

Claim 1 . (Currently amended) A data storage device comprising: 
a data storage area consisting of a plurality of blocks, each of which consists of a 
plurality of sectors which each have a predetermined data capacity; and 
cryptosystem means; 

wherein said cryptosystem means receives, as cryptosystem keys for performing 
cryptosystem processing on data to be stored in said data storage area, 

a first set of keys correlated with the encryption keys or decryption keys for each 
of the sectors from a device capable of performing data communication with said data 
storage device and 

a second set of keys correlated with [fan]] integrity-check-value generating [[key]] 
keys of data to be stored in at least one of the sectors[[,]]; and 

wherein said encryption means further creates encrypted keys by executing 
encryption processing on the first and second set of keys in a cipher block chaining 
(CBC) mode using a storage key stored in said data storage device, and 

transmits[[,]] the encrypted keys to said data storage device , a sot of encrypted 
koys obta i ned by oxocut i ng encrypt i on proc e ss i ng i n tho c i phor block cha i n i ng (CBC) 
mod e on th e r e c e iv e d s e t of k e ys; 
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sa i d CBC mod e e ncrypts sa i d data us i ng sa i d s e t of k e ys bas e d on at le ast ono 
of th e s e ctors of sa i d data e ncrypt e d by said i ntegr i ty - ch e ck - va l u e g e nerat i ng koy . 

Claim 2. (Original) A data storage device according to Claim 1 , wherein said 
cryptosystem means generates key data as the header information of the data to be 
stored in said data storage area by using a storage key which is unique to said data 
storage device to execute the encryption processing in the CBC mode on the received 
set of keys. 

Claim 3. (Original) A data storage device according to Claim 1 , wherein: 
said data storage device performs mutual authentication with said device capable 

of performing data communication with said data storage device; 

the received set of keys is a set of session-key-used CBC-mode-processing keys 

encrypted in the CBC mode by using a session key generated in the mutual 

authentication; 

said cryptosystem means performs the decryption in the CBC mode of said set of 
encrypted session-key-used CBC-mode-processing keys; and 

in said cryptosystem means, a set of storage-key-used CBC-mode-processing 
keys is generated by executing, based on a storage key unique to said data storage 
device, the encryption processing in the CBC mode on the set of decrypted session- 
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key-used CBC-mode processing keys, and said set of storage-key-used CBC-mode- 
processing keys is transmitted as header-information-forming data to said device. 

Claim 4. (Original) A data storage device according to Claim 1 , wherein: 

said data storage device performs mutual authentication with said device capable 
of performing data communication with said data storage device; 

the received set of keys is header information on the data to be stored in said 
data storage area, and is a set of storage-key-used CBC-mode-processing keys 
encrypted in the CBC mode based on a storage key unique to said data storage device; 

said cryptosystem means performs the decryption in the CBC mode of the set of 
encrypted storage-key-used CBC-mode-processing keys by using said storage key; and 

in said cryptosystem means, a set of session-key-used CBC-mode-processing 
keys is generated by executing, based on a session key generated in the mutual 
authentication, the encryption processing in the CBC mode, and said set of session- 
key-used CBC mode-processing keys is transmitted as data constituting decrypting key 
information. 

Claim 5. (Canceled) 

Claim 6. (Currently amended) A data recording method for a data processor 
comprising: a data storage device comprising cryptosystem means and a data storage 
area consisting of a plurality of blocks, each of which consists of a plurality of sectors 
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which each have a predetermined data capacity; and a data recording device for 
executing data storage processing by transmitting data to said data storage device, said 
data recording method comprising the steps of: 

executing mutual authentication processing between said data storage 
device and said data recording device; 

when the mutual authentication is established, transmitting, to said data 
storage device, by said data recording device, a set of session-key-used CBC- 
mode processing keys which are generated by executing, based on a session 
key generated in the mutual authentication, encryption processing in the CBC 
mode on a first said set of keys applicable to encryption processing on pieces of 
data to be stored in the sectors and a second set of keys correlating to [[an]] 
integrity-check-value generating [[key]] keys of data to be stored in at least one of 
the sectors, the encryption processing being executed on said first and second 
set of keys in the CBC mode using a storage key stored in said data storage 
device said CBC mod e e ncrypts said data us i ng said s e t of k e ys bas e d on at 
le ast on e of th e s e ctors of sa i d data e ncrypt e d by sa i d i nt e gr i ty - ch e ck va l uo 
g e n e rat i ng k e y ; 

decrypting, by said data storage device, said set of session-key-used 
CBC-mode-processing keys by performing decryption in the CBC mode using the 
session key; 

transmitting, to said data storage device, a set of storage-key-used CBC- 
mode-processing keys which are generated by executing, based on a storage 
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key unique to said data storage device, encryption processing in the CBC mode 
on the set decrypted session-key-used CBC-mode-processing keys; and 

generating, by said data recording device, header information including as 
a component the received set of storage-key-used CBC-mode-processing keys, 
the header information corresponding to the data to be stored in said data 
storage device. 

Claim 7. (Currently amended) A data playback method for a data processor 
comprising: a data storage device comprising cryptosystem means and a data storage 
area consisting of a plurality of blocks, each of which consists of a plurality of sectors 
which each have a predetermined data capacity; and a data playback device for playing 
back data which is received from said data storage device, said data playback method 
comprising the steps of: 

executing mutual authentication processing between said data storage 
device and said data playback device; 

when the mutual authentication is established, transmitting, from said data 
playback device to said data storage device, a set of storage-key-used CBC- 
mode-processing keys which is included in the header information of data stored 
in said data storage area and which is generated by executing encryption 
processing in the CBC mode using a storage key unique to said data storage 
device af»4 on an integrity-check-value generating key of data to be stored in at 
least one of the sectors , sa i d CBC mod e e ncrypts sa i d data us i ng sa i d s e t of 
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k e ys bas e d on at le ast on e of th e s e ctors of said data encrypt e d by said integr i ty 
ch e ck - valu e g e n e rat i ng k e y ; 

decrypting, by said data storage device, the set of storage-key-used CBC- 
mode-processing keys by performing decryption in the CBC mode using the 
storage key; 

transmitting, by said data storage device, to said data playback device, a 
set of session-key-used CBC-mode-processing keys which are generated by 
executing, based on a session key generated in the mutual authentication, 
encryption processing in the CBC mode on the set of decrypted storage-key- 
used CBC-mode-processing keys; and 

obtaining, by said data playback device, a set of keys for decrypting 
encrypted sector data which is stored in each of the sectors in said data storage 
area by decrypting, in the CBC mode, the session-key-used CBC-mode- 
processing keys by using the session key. 

Claim 8. (Currently amended) A program providing medium for providing a 
computer program which controls a computer system to execute data recording 
processing for a data processor comprising: a data storage device comprising 
cryptosystem means and a data storage area consisting of a plurality of blocks, each of 
which consists of a plurality of sectors which each have a predetermined data capacity; 
and a data recording device for executing data storage processing by transmitting data 
to said data storage device, said computer program comprising the steps of: 
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executing mutual authentication processing between said data storage 
device and said data recording device; 

when the mutual authentication is established, transmitting, to said data 
storage device, by said data recording device, a set of session-key-used CBC- 
mode processing keys which are generated by executing, based on a session 
key generated in the mutual authentication, encryption processing in the CBC 
mode on sate a first set of keys applicable to encryption processing on pieces of 
data to be stored in the sectors and [[an]] a second set of keys correlated with 
integrity-check-value generating [[key]] keys of data to be stored in at least one of 
the sectors, the encryption processing being executed using a storage key stored 
in said data storage device sa i d CBC mod e e ncrypts said data us i ng sa i d s e t of 
k e ys bas e d on at le ast on e of th e sectors of said data e ncrypt e d by sa i d i nt e gr i ty - 
ch e ck - valu e g e n e rat i ng key ; 

decrypting, by said data storage device, said set of session-key-used 
CBC-mode-processing keys by performing decryption in the CBC mode using the 
session key; 

transmitting, to said data storage device, a set of storage-key-used CBC- 
mode-processing keys which are generated by executing, based on a storage 
key unique to said data storage device, encryption processing in the CBC mode 
on the set of decrypted session-key-used CBC-mode-processing keys; and 

generating, by said data recording device, header information including as 
a component the received set of storage-key-used CBC-mode-processing keys; 
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the header information corresponding to the data to be stored in said data 
storage device. 

Claim 9. (Currently amended) A program providing medium for providing a 
computer program which controls a computer system to execute data playback 
processing for a data processor comprising: a data storage device comprising 
cryptosystem means and a data storage area consisting of a plurality of blocks, each of 
which consists of a plurality of sectors which each have a predetermined data capacity; 
and a data playback device for playback device data which is received from said data 
storage device; said computer program comprising the steps of: 

executing mutual authentication processing between said data storage 
device and said data playback device; 

when the mutual authentication is established, transmitting, from said data 
playback device to said data storage device, a set of storage-key-used CBC- 
mode-processing keys which is included in the header information of data stored 
in said data storage area and which is generated by executing encryption 
processing in the CBC mode using a storage key unique to said data storage 
device afi4 on an integrity-check-value generating key of data to be stored in at 
least one of the sectors , sa i d CBC mod e e ncrypts sa i d data us i ng sa i d s e t of 
k e ys bas e d on at le ast on e of th e s e ctors of said data e ncrypt e d by sa i d i nt e gr i ty 
ch e ck - va l u e g e n e rat i ng k e y ; 
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decrypting, by said data storage device, the set of storage-key-used CBC- 
-mode-processing keys by performing decryption in the CBC mode using the 
storage key; 

transmitting, by said data storage device, to said data playback device, a 
set of session-key-used CBC-mode-processing keys which are generated by 
executing, based on a session key generated in the mutual authentication, 
encryption processing in the CBC mode on the set of decrypted storage-key- 
used CBC-mode-processing keys; and 

obtaining, by said data playback device, a set of keys for decrypting 
encrypted sector data which is stored in each of the sectors in said data storage 
area by decrypting, in the CBC mode, the session-key-used CBC-mode- 
processing keys by using the session key. 
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